aws-sdk-ssoadmin 1.17.0 → 1.20.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -10,13 +10,13 @@
10
10
  module Aws::SSOAdmin
11
11
  module Types
12
12
 
13
- # These are Amazon Web Services SSO identity store attributes that you
14
- # can configure for use in attributes-based access control (ABAC). You
15
- # can create permissions policies that determine who can access your
16
- # Amazon Web Services resources based upon the configured attribute
17
- # values. When you enable ABAC and specify `AccessControlAttributes`,
18
- # Amazon Web Services SSO passes the attribute values of the
19
- # authenticated user into IAM for use in policy evaluation.
13
+ # These are IAM Identity Center identity store attributes that you can
14
+ # configure for use in attributes-based access control (ABAC). You can
15
+ # create permissions policies that determine who can access your AWS
16
+ # resources based upon the configured attribute values. When you enable
17
+ # ABAC and specify `AccessControlAttributes`, IAM Identity Center passes
18
+ # the attribute values of the authenticated user into IAM for use in
19
+ # policy evaluation.
20
20
  #
21
21
  # @note When making an API call, you may pass AccessControlAttribute
22
22
  # data as a hash:
@@ -31,7 +31,7 @@ module Aws::SSOAdmin
31
31
  # @!attribute [rw] key
32
32
  # The name of the attribute associated with your identities in your
33
33
  # identity source. This is used to map a specified attribute in your
34
- # identity source with an attribute in Amazon Web Services SSO.
34
+ # identity source with an attribute in IAM Identity Center.
35
35
  # @return [String]
36
36
  #
37
37
  # @!attribute [rw] value
@@ -49,8 +49,8 @@ module Aws::SSOAdmin
49
49
  end
50
50
 
51
51
  # The value used for mapping a specified attribute to an identity
52
- # source. For more information, see [Attribute mappings][1] in the
53
- # Amazon Web Services Single Sign-On User Guide.
52
+ # source. For more information, see [Attribute mappings][1] in the *IAM
53
+ # Identity Center User Guide*.
54
54
  #
55
55
  #
56
56
  #
@@ -64,8 +64,8 @@ module Aws::SSOAdmin
64
64
  # }
65
65
  #
66
66
  # @!attribute [rw] source
67
- # The identity source to use when mapping a specified attribute to
68
- # Amazon Web Services SSO.
67
+ # The identity source to use when mapping a specified attribute to IAM
68
+ # Identity Center.
69
69
  # @return [Array<String>]
70
70
  #
71
71
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AccessControlAttributeValue AWS API Documentation
@@ -90,22 +90,22 @@ module Aws::SSOAdmin
90
90
  end
91
91
 
92
92
  # The assignment that indicates a principal's limited access to a
93
- # specified Amazon Web Services account with a specified permission set.
93
+ # specified AWS account with a specified permission set.
94
94
  #
95
95
  # <note markdown="1"> The term *principal* here refers to a user or group that is defined in
96
- # Amazon Web Services SSO.
96
+ # IAM Identity Center.
97
97
  #
98
98
  # </note>
99
99
  #
100
100
  # @!attribute [rw] account_id
101
- # The identifier of the Amazon Web Services account.
101
+ # The identifier of the AWS account.
102
102
  # @return [String]
103
103
  #
104
104
  # @!attribute [rw] permission_set_arn
105
105
  # The ARN of the permission set. For more information about ARNs, see
106
- # [Amazon Resource Names (ARNs) and Amazon Web Services Service
106
+ # [Amazon Resource Names (ARNs) and AWS Service
107
107
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
108
- # *Amazon Web Services General Reference*.
108
+ # *AWS General Reference*.
109
109
  # @return [String]
110
110
  #
111
111
  # @!attribute [rw] principal_type
@@ -113,11 +113,11 @@ module Aws::SSOAdmin
113
113
  # @return [String]
114
114
  #
115
115
  # @!attribute [rw] principal_id
116
- # An identifier for an object in Amazon Web Services SSO, such as a
117
- # user or group. PrincipalIds are GUIDs (For example,
116
+ # An identifier for an object in IAM Identity Center, such as a user
117
+ # or group. PrincipalIds are GUIDs (For example,
118
118
  # f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
119
- # PrincipalIds in Amazon Web Services SSO, see the [Amazon Web
120
- # Services SSO Identity Store API
119
+ # PrincipalIds in IAM Identity Center, see the [IAM Identity Center
120
+ # Identity Store API
121
121
  # Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
122
122
  # @return [String]
123
123
  #
@@ -150,8 +150,8 @@ module Aws::SSOAdmin
150
150
  # @return [String]
151
151
  #
152
152
  # @!attribute [rw] target_id
153
- # TargetID is an Amazon Web Services account identifier, typically a
154
- # 10-12 digit string (For example, 123456789012).
153
+ # TargetID is an AWS account identifier, typically a 10-12 digit
154
+ # string (For example, 123456789012).
155
155
  # @return [String]
156
156
  #
157
157
  # @!attribute [rw] target_type
@@ -160,9 +160,9 @@ module Aws::SSOAdmin
160
160
  #
161
161
  # @!attribute [rw] permission_set_arn
162
162
  # The ARN of the permission set. For more information about ARNs, see
163
- # [Amazon Resource Names (ARNs) and Amazon Web Services Service
163
+ # [Amazon Resource Names (ARNs) and AWS Service
164
164
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
165
- # *Amazon Web Services General Reference*.
165
+ # *AWS General Reference*.
166
166
  # @return [String]
167
167
  #
168
168
  # @!attribute [rw] principal_type
@@ -170,11 +170,11 @@ module Aws::SSOAdmin
170
170
  # @return [String]
171
171
  #
172
172
  # @!attribute [rw] principal_id
173
- # An identifier for an object in Amazon Web Services SSO, such as a
174
- # user or group. PrincipalIds are GUIDs (For example,
173
+ # An identifier for an object in IAM Identity Center, such as a user
174
+ # or group. PrincipalIds are GUIDs (For example,
175
175
  # f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
176
- # PrincipalIds in Amazon Web Services SSO, see the [Amazon Web
177
- # Services SSO Identity Store API
176
+ # PrincipalIds in IAM Identity Center, see the [IAM Identity Center
177
+ # Identity Store API
178
178
  # Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
179
179
  # @return [String]
180
180
  #
@@ -236,8 +236,8 @@ module Aws::SSOAdmin
236
236
  # }
237
237
  #
238
238
  # @!attribute [rw] instance_arn
239
- # The ARN of the SSO instance under which the operation will be
240
- # executed.
239
+ # The ARN of the IAM Identity Center instance under which the
240
+ # operation will be executed.
241
241
  # @return [String]
242
242
  #
243
243
  # @!attribute [rw] permission_set_arn
@@ -245,10 +245,9 @@ module Aws::SSOAdmin
245
245
  # @return [String]
246
246
  #
247
247
  # @!attribute [rw] customer_managed_policy_reference
248
- # Specifies the name and path of the IAM customer managed policy. You
249
- # must have an IAM policy that matches the name and path in each
250
- # Amazon Web Services account where you want to deploy your permission
251
- # set.
248
+ # Specifies the name and path of a customer managed policy. You must
249
+ # have an IAM policy that matches the name and path in each AWS
250
+ # account where you want to deploy your permission set.
252
251
  # @return [Types::CustomerManagedPolicyReference]
253
252
  #
254
253
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachCustomerManagedPolicyReferenceToPermissionSetRequest AWS API Documentation
@@ -275,11 +274,11 @@ module Aws::SSOAdmin
275
274
  # }
276
275
  #
277
276
  # @!attribute [rw] instance_arn
278
- # The ARN of the SSO instance under which the operation will be
279
- # executed. For more information about ARNs, see [Amazon Resource
280
- # Names (ARNs) and Amazon Web Services Service
277
+ # The ARN of the IAM Identity Center instance under which the
278
+ # operation will be executed. For more information about ARNs, see
279
+ # [Amazon Resource Names (ARNs) and AWS Service
281
280
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
282
- # *Amazon Web Services General Reference*.
281
+ # *AWS General Reference*.
283
282
  # @return [String]
284
283
  #
285
284
  # @!attribute [rw] permission_set_arn
@@ -288,8 +287,7 @@ module Aws::SSOAdmin
288
287
  # @return [String]
289
288
  #
290
289
  # @!attribute [rw] managed_policy_arn
291
- # The Amazon Web Services managed policy ARN to be attached to a
292
- # permission set.
290
+ # The AWS managed policy ARN to be attached to a permission set.
293
291
  # @return [String]
294
292
  #
295
293
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachManagedPolicyToPermissionSetRequest AWS API Documentation
@@ -306,19 +304,17 @@ module Aws::SSOAdmin
306
304
  #
307
305
  class AttachManagedPolicyToPermissionSetResponse < Aws::EmptyStructure; end
308
306
 
309
- # A structure that stores the details of the Amazon Web Services managed
310
- # IAM policy.
307
+ # A structure that stores the details of the AWS managed policy.
311
308
  #
312
309
  # @!attribute [rw] name
313
- # The name of the Amazon Web Services managed IAM policy.
310
+ # The name of the AWS managed policy.
314
311
  # @return [String]
315
312
  #
316
313
  # @!attribute [rw] arn
317
- # The ARN of the Amazon Web Services managed IAM policy. For more
318
- # information about ARNs, see [Amazon Resource Names (ARNs) and Amazon
319
- # Web Services Service
314
+ # The ARN of the AWS managed policy. For more information about ARNs,
315
+ # see [Amazon Resource Names (ARNs) and AWS Service
320
316
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
321
- # *Amazon Web Services General Reference*.
317
+ # *AWS General Reference*.
322
318
  # @return [String]
323
319
  #
324
320
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/AttachedManagedPolicy AWS API Documentation
@@ -360,16 +356,16 @@ module Aws::SSOAdmin
360
356
  # }
361
357
  #
362
358
  # @!attribute [rw] instance_arn
363
- # The ARN of the SSO instance under which the operation will be
364
- # executed. For more information about ARNs, see [Amazon Resource
365
- # Names (ARNs) and Amazon Web Services Service
359
+ # The ARN of the IAM Identity Center instance under which the
360
+ # operation will be executed. For more information about ARNs, see
361
+ # [Amazon Resource Names (ARNs) and AWS Service
366
362
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
367
- # *Amazon Web Services General Reference*.
363
+ # *AWS General Reference*.
368
364
  # @return [String]
369
365
  #
370
366
  # @!attribute [rw] target_id
371
- # TargetID is an Amazon Web Services account identifier, typically a
372
- # 10-12 digit string (For example, 123456789012).
367
+ # TargetID is an AWS account identifier, typically a 10-12 digit
368
+ # string (For example, 123456789012).
373
369
  # @return [String]
374
370
  #
375
371
  # @!attribute [rw] target_type
@@ -386,11 +382,11 @@ module Aws::SSOAdmin
386
382
  # @return [String]
387
383
  #
388
384
  # @!attribute [rw] principal_id
389
- # An identifier for an object in Amazon Web Services SSO, such as a
390
- # user or group. PrincipalIds are GUIDs (For example,
385
+ # An identifier for an object in IAM Identity Center, such as a user
386
+ # or group. PrincipalIds are GUIDs (For example,
391
387
  # f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
392
- # PrincipalIds in Amazon Web Services SSO, see the [Amazon Web
393
- # Services SSO Identity Store API
388
+ # PrincipalIds in IAM Identity Center, see the [IAM Identity Center
389
+ # Identity Store API
394
390
  # Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
395
391
  # @return [String]
396
392
  #
@@ -437,19 +433,19 @@ module Aws::SSOAdmin
437
433
  # }
438
434
  #
439
435
  # @!attribute [rw] instance_arn
440
- # The ARN of the SSO instance under which the operation will be
441
- # executed.
436
+ # The ARN of the IAM Identity Center instance under which the
437
+ # operation will be executed.
442
438
  # @return [String]
443
439
  #
444
440
  # @!attribute [rw] instance_access_control_attribute_configuration
445
- # Specifies the Amazon Web Services SSO identity store attributes to
446
- # add to your ABAC configuration. When using an external identity
447
- # provider as an identity source, you can pass attributes through the
448
- # SAML assertion. Doing so provides an alternative to configuring
449
- # attributes from the Amazon Web Services SSO identity store. If a
450
- # SAML assertion passes any of these attributes, Amazon Web Services
451
- # SSO will replace the attribute value with the value from the Amazon
452
- # Web Services SSO identity store.
441
+ # Specifies the IAM Identity Center identity store attributes to add
442
+ # to your ABAC configuration. When using an external identity provider
443
+ # as an identity source, you can pass attributes through the SAML
444
+ # assertion. Doing so provides an alternative to configuring
445
+ # attributes from the IAM Identity Center identity store. If a SAML
446
+ # assertion passes any of these attributes, IAM Identity Center will
447
+ # replace the attribute value with the value from the IAM Identity
448
+ # Center identity store.
453
449
  # @return [Types::InstanceAccessControlAttributeConfiguration]
454
450
  #
455
451
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/CreateInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
@@ -491,11 +487,11 @@ module Aws::SSOAdmin
491
487
  # @return [String]
492
488
  #
493
489
  # @!attribute [rw] instance_arn
494
- # The ARN of the SSO instance under which the operation will be
495
- # executed. For more information about ARNs, see [Amazon Resource
496
- # Names (ARNs) and Amazon Web Services Service
490
+ # The ARN of the IAM Identity Center instance under which the
491
+ # operation will be executed. For more information about ARNs, see
492
+ # [Amazon Resource Names (ARNs) and AWS Service
497
493
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
498
- # *Amazon Web Services General Reference*.
494
+ # *AWS General Reference*.
499
495
  # @return [String]
500
496
  #
501
497
  # @!attribute [rw] session_duration
@@ -526,7 +522,7 @@ module Aws::SSOAdmin
526
522
  end
527
523
 
528
524
  # @!attribute [rw] permission_set
529
- # Defines the level of access on an Amazon Web Services account.
525
+ # Defines the level of access on an AWS account.
530
526
  # @return [Types::PermissionSet]
531
527
  #
532
528
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/CreatePermissionSetResponse AWS API Documentation
@@ -537,9 +533,9 @@ module Aws::SSOAdmin
537
533
  include Aws::Structure
538
534
  end
539
535
 
540
- # Specifies the name and path of the IAM customer managed policy. You
541
- # must have an IAM policy that matches the name and path in each Amazon
542
- # Web Services account where you want to deploy your permission set.
536
+ # Specifies the name and path of a customer managed policy. You must
537
+ # have an IAM policy that matches the name and path in each AWS account
538
+ # where you want to deploy your permission set.
543
539
  #
544
540
  # @note When making an API call, you may pass CustomerManagedPolicyReference
545
541
  # data as a hash:
@@ -550,13 +546,15 @@ module Aws::SSOAdmin
550
546
  # }
551
547
  #
552
548
  # @!attribute [rw] name
553
- # The name of the policy document.
549
+ # The name of the IAM policy that you have configured in each account
550
+ # where you want to deploy your permission set.
554
551
  # @return [String]
555
552
  #
556
553
  # @!attribute [rw] path
557
- # The path for the policy. The default is `/`. For more information,
558
- # see [Friendly names and paths][1] in the Identity and Access
559
- # Management user guide.
554
+ # The path to the IAM policy that you have configured in each account
555
+ # where you want to deploy your permission set. The default is `/`.
556
+ # For more information, see [Friendly names and paths][1] in the *IAM
557
+ # User Guide*.
560
558
  #
561
559
  #
562
560
  #
@@ -585,16 +583,16 @@ module Aws::SSOAdmin
585
583
  # }
586
584
  #
587
585
  # @!attribute [rw] instance_arn
588
- # The ARN of the SSO instance under which the operation will be
589
- # executed. For more information about ARNs, see [Amazon Resource
590
- # Names (ARNs) and Amazon Web Services Service
586
+ # The ARN of the IAM Identity Center instance under which the
587
+ # operation will be executed. For more information about ARNs, see
588
+ # [Amazon Resource Names (ARNs) and AWS Service
591
589
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
592
- # *Amazon Web Services General Reference*.
590
+ # *AWS General Reference*.
593
591
  # @return [String]
594
592
  #
595
593
  # @!attribute [rw] target_id
596
- # TargetID is an Amazon Web Services account identifier, typically a
597
- # 10-12 digit string (For example, 123456789012).
594
+ # TargetID is an AWS account identifier, typically a 10-12 digit
595
+ # string (For example, 123456789012).
598
596
  # @return [String]
599
597
  #
600
598
  # @!attribute [rw] target_type
@@ -610,11 +608,11 @@ module Aws::SSOAdmin
610
608
  # @return [String]
611
609
  #
612
610
  # @!attribute [rw] principal_id
613
- # An identifier for an object in Amazon Web Services SSO, such as a
614
- # user or group. PrincipalIds are GUIDs (For example,
611
+ # An identifier for an object in IAM Identity Center, such as a user
612
+ # or group. PrincipalIds are GUIDs (For example,
615
613
  # f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
616
- # PrincipalIds in Amazon Web Services SSO, see the [Amazon Web
617
- # Services SSO Identity Store API
614
+ # PrincipalIds in IAM Identity Center, see the [IAM Identity Center
615
+ # Identity Store API
618
616
  # Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
619
617
  # @return [String]
620
618
  #
@@ -652,11 +650,11 @@ module Aws::SSOAdmin
652
650
  # }
653
651
  #
654
652
  # @!attribute [rw] instance_arn
655
- # The ARN of the SSO instance under which the operation will be
656
- # executed. For more information about ARNs, see [Amazon Resource
657
- # Names (ARNs) and Amazon Web Services Service
653
+ # The ARN of the IAM Identity Center instance under which the
654
+ # operation will be executed. For more information about ARNs, see
655
+ # [Amazon Resource Names (ARNs) and AWS Service
658
656
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
659
- # *Amazon Web Services General Reference*.
657
+ # *AWS General Reference*.
660
658
  # @return [String]
661
659
  #
662
660
  # @!attribute [rw] permission_set_arn
@@ -684,8 +682,8 @@ module Aws::SSOAdmin
684
682
  # }
685
683
  #
686
684
  # @!attribute [rw] instance_arn
687
- # The ARN of the SSO instance under which the operation will be
688
- # executed.
685
+ # The ARN of the IAM Identity Center instance under which the
686
+ # operation will be executed.
689
687
  # @return [String]
690
688
  #
691
689
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DeleteInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
@@ -709,11 +707,11 @@ module Aws::SSOAdmin
709
707
  # }
710
708
  #
711
709
  # @!attribute [rw] instance_arn
712
- # The ARN of the SSO instance under which the operation will be
713
- # executed. For more information about ARNs, see [Amazon Resource
714
- # Names (ARNs) and Amazon Web Services Service
710
+ # The ARN of the IAM Identity Center instance under which the
711
+ # operation will be executed. For more information about ARNs, see
712
+ # [Amazon Resource Names (ARNs) and AWS Service
715
713
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
716
- # *Amazon Web Services General Reference*.
714
+ # *AWS General Reference*.
717
715
  # @return [String]
718
716
  #
719
717
  # @!attribute [rw] permission_set_arn
@@ -742,8 +740,8 @@ module Aws::SSOAdmin
742
740
  # }
743
741
  #
744
742
  # @!attribute [rw] instance_arn
745
- # The ARN of the SSO instance under which the operation will be
746
- # executed.
743
+ # The ARN of the IAM Identity Center instance under which the
744
+ # operation will be executed.
747
745
  # @return [String]
748
746
  #
749
747
  # @!attribute [rw] permission_set_arn
@@ -772,11 +770,11 @@ module Aws::SSOAdmin
772
770
  # }
773
771
  #
774
772
  # @!attribute [rw] instance_arn
775
- # The ARN of the SSO instance under which the operation will be
776
- # executed. For more information about ARNs, see [Amazon Resource
777
- # Names (ARNs) and Amazon Web Services Service
773
+ # The ARN of the IAM Identity Center instance under which the
774
+ # operation will be executed. For more information about ARNs, see
775
+ # [Amazon Resource Names (ARNs) and AWS Service
778
776
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
779
- # *Amazon Web Services General Reference*.
777
+ # *AWS General Reference*.
780
778
  # @return [String]
781
779
  #
782
780
  # @!attribute [rw] account_assignment_creation_request_id
@@ -813,11 +811,11 @@ module Aws::SSOAdmin
813
811
  # }
814
812
  #
815
813
  # @!attribute [rw] instance_arn
816
- # The ARN of the SSO instance under which the operation will be
817
- # executed. For more information about ARNs, see [Amazon Resource
818
- # Names (ARNs) and Amazon Web Services Service
814
+ # The ARN of the IAM Identity Center instance under which the
815
+ # operation will be executed. For more information about ARNs, see
816
+ # [Amazon Resource Names (ARNs) and AWS Service
819
817
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
820
- # *Amazon Web Services General Reference*.
818
+ # *AWS General Reference*.
821
819
  # @return [String]
822
820
  #
823
821
  # @!attribute [rw] account_assignment_deletion_request_id
@@ -853,8 +851,8 @@ module Aws::SSOAdmin
853
851
  # }
854
852
  #
855
853
  # @!attribute [rw] instance_arn
856
- # The ARN of the SSO instance under which the operation will be
857
- # executed.
854
+ # The ARN of the IAM Identity Center instance under which the
855
+ # operation will be executed.
858
856
  # @return [String]
859
857
  #
860
858
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribeInstanceAccessControlAttributeConfigurationRequest AWS API Documentation
@@ -875,8 +873,8 @@ module Aws::SSOAdmin
875
873
  # @return [String]
876
874
  #
877
875
  # @!attribute [rw] instance_access_control_attribute_configuration
878
- # Gets the list of Amazon Web Services SSO identity store attributes
879
- # that have been added to your ABAC configuration.
876
+ # Gets the list of IAM Identity Center identity store attributes that
877
+ # have been added to your ABAC configuration.
880
878
  # @return [Types::InstanceAccessControlAttributeConfiguration]
881
879
  #
882
880
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribeInstanceAccessControlAttributeConfigurationResponse AWS API Documentation
@@ -898,11 +896,11 @@ module Aws::SSOAdmin
898
896
  # }
899
897
  #
900
898
  # @!attribute [rw] instance_arn
901
- # The ARN of the SSO instance under which the operation will be
902
- # executed. For more information about ARNs, see [Amazon Resource
903
- # Names (ARNs) and Amazon Web Services Service
899
+ # The ARN of the IAM Identity Center instance under which the
900
+ # operation will be executed. For more information about ARNs, see
901
+ # [Amazon Resource Names (ARNs) and AWS Service
904
902
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
905
- # *Amazon Web Services General Reference*.
903
+ # *AWS General Reference*.
906
904
  # @return [String]
907
905
  #
908
906
  # @!attribute [rw] provision_permission_set_request_id
@@ -940,11 +938,11 @@ module Aws::SSOAdmin
940
938
  # }
941
939
  #
942
940
  # @!attribute [rw] instance_arn
943
- # The ARN of the SSO instance under which the operation will be
944
- # executed. For more information about ARNs, see [Amazon Resource
945
- # Names (ARNs) and Amazon Web Services Service
941
+ # The ARN of the IAM Identity Center instance under which the
942
+ # operation will be executed. For more information about ARNs, see
943
+ # [Amazon Resource Names (ARNs) and AWS Service
946
944
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
947
- # *Amazon Web Services General Reference*.
945
+ # *AWS General Reference*.
948
946
  # @return [String]
949
947
  #
950
948
  # @!attribute [rw] permission_set_arn
@@ -961,7 +959,7 @@ module Aws::SSOAdmin
961
959
  end
962
960
 
963
961
  # @!attribute [rw] permission_set
964
- # Describes the level of access on an Amazon Web Services account.
962
+ # Describes the level of access on an AWS account.
965
963
  # @return [Types::PermissionSet]
966
964
  #
967
965
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribePermissionSetResponse AWS API Documentation
@@ -985,8 +983,8 @@ module Aws::SSOAdmin
985
983
  # }
986
984
  #
987
985
  # @!attribute [rw] instance_arn
988
- # The ARN of the SSO instance under which the operation will be
989
- # executed.
986
+ # The ARN of the IAM Identity Center instance under which the
987
+ # operation will be executed.
990
988
  # @return [String]
991
989
  #
992
990
  # @!attribute [rw] permission_set_arn
@@ -994,10 +992,9 @@ module Aws::SSOAdmin
994
992
  # @return [String]
995
993
  #
996
994
  # @!attribute [rw] customer_managed_policy_reference
997
- # Specifies the name and path of the IAM customer managed policy. You
998
- # must have an IAM policy that matches the name and path in each
999
- # Amazon Web Services account where you want to deploy your permission
1000
- # set.
995
+ # Specifies the name and path of a customer managed policy. You must
996
+ # have an IAM policy that matches the name and path in each AWS
997
+ # account where you want to deploy your permission set.
1001
998
  # @return [Types::CustomerManagedPolicyReference]
1002
999
  #
1003
1000
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DetachCustomerManagedPolicyReferenceFromPermissionSetRequest AWS API Documentation
@@ -1024,11 +1021,11 @@ module Aws::SSOAdmin
1024
1021
  # }
1025
1022
  #
1026
1023
  # @!attribute [rw] instance_arn
1027
- # The ARN of the SSO instance under which the operation will be
1028
- # executed. For more information about ARNs, see [Amazon Resource
1029
- # Names (ARNs) and Amazon Web Services Service
1024
+ # The ARN of the IAM Identity Center instance under which the
1025
+ # operation will be executed. For more information about ARNs, see
1026
+ # [Amazon Resource Names (ARNs) and AWS Service
1030
1027
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1031
- # *Amazon Web Services General Reference*.
1028
+ # *AWS General Reference*.
1032
1029
  # @return [String]
1033
1030
  #
1034
1031
  # @!attribute [rw] permission_set_arn
@@ -1037,8 +1034,7 @@ module Aws::SSOAdmin
1037
1034
  # @return [String]
1038
1035
  #
1039
1036
  # @!attribute [rw] managed_policy_arn
1040
- # The Amazon Web Services managed policy ARN to be detached from a
1041
- # permission set.
1037
+ # The AWS managed policy ARN to be detached from a permission set.
1042
1038
  # @return [String]
1043
1039
  #
1044
1040
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DetachManagedPolicyFromPermissionSetRequest AWS API Documentation
@@ -1064,11 +1060,11 @@ module Aws::SSOAdmin
1064
1060
  # }
1065
1061
  #
1066
1062
  # @!attribute [rw] instance_arn
1067
- # The ARN of the SSO instance under which the operation will be
1068
- # executed. For more information about ARNs, see [Amazon Resource
1069
- # Names (ARNs) and Amazon Web Services Service
1063
+ # The ARN of the IAM Identity Center instance under which the
1064
+ # operation will be executed. For more information about ARNs, see
1065
+ # [Amazon Resource Names (ARNs) and AWS Service
1070
1066
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1071
- # *Amazon Web Services General Reference*.
1067
+ # *AWS General Reference*.
1072
1068
  # @return [String]
1073
1069
  #
1074
1070
  # @!attribute [rw] permission_set_arn
@@ -1085,7 +1081,7 @@ module Aws::SSOAdmin
1085
1081
  end
1086
1082
 
1087
1083
  # @!attribute [rw] inline_policy
1088
- # The IAM inline policy that is attached to the permission set.
1084
+ # The inline policy that is attached to the permission set.
1089
1085
  # @return [String]
1090
1086
  #
1091
1087
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/GetInlinePolicyForPermissionSetResponse AWS API Documentation
@@ -1105,8 +1101,8 @@ module Aws::SSOAdmin
1105
1101
  # }
1106
1102
  #
1107
1103
  # @!attribute [rw] instance_arn
1108
- # The ARN of the SSO instance under which the operation will be
1109
- # executed.
1104
+ # The ARN of the IAM Identity Center instance under which the
1105
+ # operation will be executed.
1110
1106
  # @return [String]
1111
1107
  #
1112
1108
  # @!attribute [rw] permission_set_arn
@@ -1153,7 +1149,7 @@ module Aws::SSOAdmin
1153
1149
  #
1154
1150
  # @!attribute [rw] access_control_attributes
1155
1151
  # Lists the attributes that are configured for ABAC in the specified
1156
- # Amazon Web Services SSO instance.
1152
+ # IAM Identity Center instance.
1157
1153
  # @return [Array<Types::AccessControlAttribute>]
1158
1154
  #
1159
1155
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/InstanceAccessControlAttributeConfiguration AWS API Documentation
@@ -1164,19 +1160,19 @@ module Aws::SSOAdmin
1164
1160
  include Aws::Structure
1165
1161
  end
1166
1162
 
1167
- # Provides information about the SSO instance.
1163
+ # Provides information about the IAM Identity Center instance.
1168
1164
  #
1169
1165
  # @!attribute [rw] instance_arn
1170
- # The ARN of the SSO instance under which the operation will be
1171
- # executed. For more information about ARNs, see [Amazon Resource
1172
- # Names (ARNs) and Amazon Web Services Service
1166
+ # The ARN of the IAM Identity Center instance under which the
1167
+ # operation will be executed. For more information about ARNs, see
1168
+ # [Amazon Resource Names (ARNs) and AWS Service
1173
1169
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1174
- # *Amazon Web Services General Reference*.
1170
+ # *AWS General Reference*.
1175
1171
  # @return [String]
1176
1172
  #
1177
1173
  # @!attribute [rw] identity_store_id
1178
- # The identifier of the identity store that is connected to the SSO
1179
- # instance.
1174
+ # The identifier of the identity store that is connected to the IAM
1175
+ # Identity Center instance.
1180
1176
  # @return [String]
1181
1177
  #
1182
1178
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/InstanceMetadata AWS API Documentation
@@ -1215,11 +1211,11 @@ module Aws::SSOAdmin
1215
1211
  # }
1216
1212
  #
1217
1213
  # @!attribute [rw] instance_arn
1218
- # The ARN of the SSO instance under which the operation will be
1219
- # executed. For more information about ARNs, see [Amazon Resource
1220
- # Names (ARNs) and Amazon Web Services Service
1214
+ # The ARN of the IAM Identity Center instance under which the
1215
+ # operation will be executed. For more information about ARNs, see
1216
+ # [Amazon Resource Names (ARNs) and AWS Service
1221
1217
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1222
- # *Amazon Web Services General Reference*.
1218
+ # *AWS General Reference*.
1223
1219
  # @return [String]
1224
1220
  #
1225
1221
  # @!attribute [rw] max_results
@@ -1277,11 +1273,11 @@ module Aws::SSOAdmin
1277
1273
  # }
1278
1274
  #
1279
1275
  # @!attribute [rw] instance_arn
1280
- # The ARN of the SSO instance under which the operation will be
1281
- # executed. For more information about ARNs, see [Amazon Resource
1282
- # Names (ARNs) and Amazon Web Services Service
1276
+ # The ARN of the IAM Identity Center instance under which the
1277
+ # operation will be executed. For more information about ARNs, see
1278
+ # [Amazon Resource Names (ARNs) and AWS Service
1283
1279
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1284
- # *Amazon Web Services General Reference*.
1280
+ # *AWS General Reference*.
1285
1281
  # @return [String]
1286
1282
  #
1287
1283
  # @!attribute [rw] max_results
@@ -1338,16 +1334,16 @@ module Aws::SSOAdmin
1338
1334
  # }
1339
1335
  #
1340
1336
  # @!attribute [rw] instance_arn
1341
- # The ARN of the SSO instance under which the operation will be
1342
- # executed. For more information about ARNs, see [Amazon Resource
1343
- # Names (ARNs) and Amazon Web Services Service
1337
+ # The ARN of the IAM Identity Center instance under which the
1338
+ # operation will be executed. For more information about ARNs, see
1339
+ # [Amazon Resource Names (ARNs) and AWS Service
1344
1340
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1345
- # *Amazon Web Services General Reference*.
1341
+ # *AWS General Reference*.
1346
1342
  # @return [String]
1347
1343
  #
1348
1344
  # @!attribute [rw] account_id
1349
- # The identifier of the Amazon Web Services account from which to list
1350
- # the assignments.
1345
+ # The identifier of the AWS account from which to list the
1346
+ # assignments.
1351
1347
  # @return [String]
1352
1348
  #
1353
1349
  # @!attribute [rw] permission_set_arn
@@ -1376,8 +1372,8 @@ module Aws::SSOAdmin
1376
1372
  end
1377
1373
 
1378
1374
  # @!attribute [rw] account_assignments
1379
- # The list of assignments that match the input Amazon Web Services
1380
- # account and permission set.
1375
+ # The list of assignments that match the input AWS account and
1376
+ # permission set.
1381
1377
  # @return [Array<Types::AccountAssignment>]
1382
1378
  #
1383
1379
  # @!attribute [rw] next_token
@@ -1406,21 +1402,20 @@ module Aws::SSOAdmin
1406
1402
  # }
1407
1403
  #
1408
1404
  # @!attribute [rw] instance_arn
1409
- # The ARN of the SSO instance under which the operation will be
1410
- # executed. For more information about ARNs, see [Amazon Resource
1411
- # Names (ARNs) and Amazon Web Services Service
1405
+ # The ARN of the IAM Identity Center instance under which the
1406
+ # operation will be executed. For more information about ARNs, see
1407
+ # [Amazon Resource Names (ARNs) and AWS Service
1412
1408
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1413
- # *Amazon Web Services General Reference*.
1409
+ # *AWS General Reference*.
1414
1410
  # @return [String]
1415
1411
  #
1416
1412
  # @!attribute [rw] permission_set_arn
1417
- # The ARN of the PermissionSet from which the associated Amazon Web
1418
- # Services accounts will be listed.
1413
+ # The ARN of the PermissionSet from which the associated AWS accounts
1414
+ # will be listed.
1419
1415
  # @return [String]
1420
1416
  #
1421
1417
  # @!attribute [rw] provisioning_status
1422
- # The permission set provisioning status for an Amazon Web Services
1423
- # account.
1418
+ # The permission set provisioning status for an AWS account.
1424
1419
  # @return [String]
1425
1420
  #
1426
1421
  # @!attribute [rw] max_results
@@ -1445,7 +1440,7 @@ module Aws::SSOAdmin
1445
1440
  end
1446
1441
 
1447
1442
  # @!attribute [rw] account_ids
1448
- # The list of Amazon Web Services `AccountIds`.
1443
+ # The list of AWS `AccountIds`.
1449
1444
  # @return [Array<String>]
1450
1445
  #
1451
1446
  # @!attribute [rw] next_token
@@ -1473,8 +1468,8 @@ module Aws::SSOAdmin
1473
1468
  # }
1474
1469
  #
1475
1470
  # @!attribute [rw] instance_arn
1476
- # The ARN of the SSO instance under which the operation will be
1477
- # executed.
1471
+ # The ARN of the IAM Identity Center instance under which the
1472
+ # operation will be executed.
1478
1473
  # @return [String]
1479
1474
  #
1480
1475
  # @!attribute [rw] permission_set_arn
@@ -1502,8 +1497,8 @@ module Aws::SSOAdmin
1502
1497
  end
1503
1498
 
1504
1499
  # @!attribute [rw] customer_managed_policy_references
1505
- # Specifies the names and paths of the IAM customer managed policies
1506
- # that you have attached to your permission set.
1500
+ # Specifies the names and paths of the customer managed policies that
1501
+ # you have attached to your permission set.
1507
1502
  # @return [Array<Types::CustomerManagedPolicyReference>]
1508
1503
  #
1509
1504
  # @!attribute [rw] next_token
@@ -1547,7 +1542,8 @@ module Aws::SSOAdmin
1547
1542
  end
1548
1543
 
1549
1544
  # @!attribute [rw] instances
1550
- # Lists the SSO instances that the caller has access to.
1545
+ # Lists the IAM Identity Center instances that the caller has access
1546
+ # to.
1551
1547
  # @return [Array<Types::InstanceMetadata>]
1552
1548
  #
1553
1549
  # @!attribute [rw] next_token
@@ -1575,11 +1571,11 @@ module Aws::SSOAdmin
1575
1571
  # }
1576
1572
  #
1577
1573
  # @!attribute [rw] instance_arn
1578
- # The ARN of the SSO instance under which the operation will be
1579
- # executed. For more information about ARNs, see [Amazon Resource
1580
- # Names (ARNs) and Amazon Web Services Service
1574
+ # The ARN of the IAM Identity Center instance under which the
1575
+ # operation will be executed. For more information about ARNs, see
1576
+ # [Amazon Resource Names (ARNs) and AWS Service
1581
1577
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1582
- # *Amazon Web Services General Reference*.
1578
+ # *AWS General Reference*.
1583
1579
  # @return [String]
1584
1580
  #
1585
1581
  # @!attribute [rw] permission_set_arn
@@ -1607,7 +1603,7 @@ module Aws::SSOAdmin
1607
1603
  end
1608
1604
 
1609
1605
  # @!attribute [rw] attached_managed_policies
1610
- # The array of the AttachedManagedPolicy data type object.
1606
+ # An array of the AttachedManagedPolicy data type object.
1611
1607
  # @return [Array<Types::AttachedManagedPolicy>]
1612
1608
  #
1613
1609
  # @!attribute [rw] next_token
@@ -1637,11 +1633,11 @@ module Aws::SSOAdmin
1637
1633
  # }
1638
1634
  #
1639
1635
  # @!attribute [rw] instance_arn
1640
- # The ARN of the SSO instance under which the operation will be
1641
- # executed. For more information about ARNs, see [Amazon Resource
1642
- # Names (ARNs) and Amazon Web Services Service
1636
+ # The ARN of the IAM Identity Center instance under which the
1637
+ # operation will be executed. For more information about ARNs, see
1638
+ # [Amazon Resource Names (ARNs) and AWS Service
1643
1639
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1644
- # *Amazon Web Services General Reference*.
1640
+ # *AWS General Reference*.
1645
1641
  # @return [String]
1646
1642
  #
1647
1643
  # @!attribute [rw] max_results
@@ -1698,16 +1694,16 @@ module Aws::SSOAdmin
1698
1694
  # }
1699
1695
  #
1700
1696
  # @!attribute [rw] instance_arn
1701
- # The ARN of the SSO instance under which the operation will be
1702
- # executed. For more information about ARNs, see [Amazon Resource
1703
- # Names (ARNs) and Amazon Web Services Service
1697
+ # The ARN of the IAM Identity Center instance under which the
1698
+ # operation will be executed. For more information about ARNs, see
1699
+ # [Amazon Resource Names (ARNs) and AWS Service
1704
1700
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1705
- # *Amazon Web Services General Reference*.
1701
+ # *AWS General Reference*.
1706
1702
  # @return [String]
1707
1703
  #
1708
1704
  # @!attribute [rw] account_id
1709
- # The identifier of the Amazon Web Services account from which to list
1710
- # the assignments.
1705
+ # The identifier of the AWS account from which to list the
1706
+ # assignments.
1711
1707
  # @return [String]
1712
1708
  #
1713
1709
  # @!attribute [rw] provisioning_status
@@ -1741,7 +1737,7 @@ module Aws::SSOAdmin
1741
1737
  # @return [String]
1742
1738
  #
1743
1739
  # @!attribute [rw] permission_sets
1744
- # Defines the level of access that an Amazon Web Services account has.
1740
+ # Defines the level of access that an AWS account has.
1745
1741
  # @return [Array<String>]
1746
1742
  #
1747
1743
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/ListPermissionSetsProvisionedToAccountResponse AWS API Documentation
@@ -1763,11 +1759,11 @@ module Aws::SSOAdmin
1763
1759
  # }
1764
1760
  #
1765
1761
  # @!attribute [rw] instance_arn
1766
- # The ARN of the SSO instance under which the operation will be
1767
- # executed. For more information about ARNs, see [Amazon Resource
1768
- # Names (ARNs) and Amazon Web Services Service
1762
+ # The ARN of the IAM Identity Center instance under which the
1763
+ # operation will be executed. For more information about ARNs, see
1764
+ # [Amazon Resource Names (ARNs) and AWS Service
1769
1765
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1770
- # *Amazon Web Services General Reference*.
1766
+ # *AWS General Reference*.
1771
1767
  # @return [String]
1772
1768
  #
1773
1769
  # @!attribute [rw] next_token
@@ -1790,7 +1786,7 @@ module Aws::SSOAdmin
1790
1786
  end
1791
1787
 
1792
1788
  # @!attribute [rw] permission_sets
1793
- # Defines the level of access on an Amazon Web Services account.
1789
+ # Defines the level of access on an AWS account.
1794
1790
  # @return [Array<String>]
1795
1791
  #
1796
1792
  # @!attribute [rw] next_token
@@ -1817,11 +1813,11 @@ module Aws::SSOAdmin
1817
1813
  # }
1818
1814
  #
1819
1815
  # @!attribute [rw] instance_arn
1820
- # The ARN of the SSO instance under which the operation will be
1821
- # executed. For more information about ARNs, see [Amazon Resource
1822
- # Names (ARNs) and Amazon Web Services Service
1816
+ # The ARN of the IAM Identity Center instance under which the
1817
+ # operation will be executed. For more information about ARNs, see
1818
+ # [Amazon Resource Names (ARNs) and AWS Service
1823
1819
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1824
- # *Amazon Web Services General Reference*.
1820
+ # *AWS General Reference*.
1825
1821
  # @return [String]
1826
1822
  #
1827
1823
  # @!attribute [rw] resource_arn
@@ -1890,9 +1886,9 @@ module Aws::SSOAdmin
1890
1886
  #
1891
1887
  # @!attribute [rw] permission_set_arn
1892
1888
  # The ARN of the permission set. For more information about ARNs, see
1893
- # [Amazon Resource Names (ARNs) and Amazon Web Services Service
1889
+ # [Amazon Resource Names (ARNs) and AWS Service
1894
1890
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1895
- # *Amazon Web Services General Reference*.
1891
+ # *AWS General Reference*.
1896
1892
  # @return [String]
1897
1893
  #
1898
1894
  # @!attribute [rw] description
@@ -1939,16 +1935,15 @@ module Aws::SSOAdmin
1939
1935
  # @return [String]
1940
1936
  #
1941
1937
  # @!attribute [rw] account_id
1942
- # The identifier of the Amazon Web Services account from which to list
1943
- # the assignments.
1938
+ # The identifier of the AWS account from which to list the
1939
+ # assignments.
1944
1940
  # @return [String]
1945
1941
  #
1946
1942
  # @!attribute [rw] permission_set_arn
1947
1943
  # The ARN of the permission set that is being provisioned. For more
1948
- # information about ARNs, see [Amazon Resource Names (ARNs) and Amazon
1949
- # Web Services Service
1950
- # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
1951
- # *Amazon Web Services General Reference*.
1944
+ # information about ARNs, see [Amazon Resource Names (ARNs) and AWS
1945
+ # Service Namespaces](/general/latest/gr/aws-arns-and-namespaces.html)
1946
+ # in the *AWS General Reference*.
1952
1947
  # @return [String]
1953
1948
  #
1954
1949
  # @!attribute [rw] failure_reason
@@ -1998,21 +1993,19 @@ module Aws::SSOAdmin
1998
1993
  include Aws::Structure
1999
1994
  end
2000
1995
 
2001
- # Specifies the configuration of the Amazon Web Services managed or
2002
- # customer managed policy that you want to set as a permissions
2003
- # boundary. Specify either `CustomerManagedPolicyReference` to use the
2004
- # name and path of a customer managed policy, or `ManagedPolicyArn` to
2005
- # use the ARN of an Amazon Web Services managed IAM policy. A
2006
- # permissions boundary represents the maximum permissions that any
2007
- # policy can grant your role. For more information, see [Permissions
2008
- # boundaries for IAM entities][1] in the *Identity and Access Management
2009
- # User Guide*.
1996
+ # Specifies the configuration of the AWS managed or customer managed
1997
+ # policy that you want to set as a permissions boundary. Specify either
1998
+ # `CustomerManagedPolicyReference` to use the name and path of a
1999
+ # customer managed policy, or `ManagedPolicyArn` to use the ARN of an
2000
+ # AWS managed policy. A permissions boundary represents the maximum
2001
+ # permissions that any policy can grant your role. For more information,
2002
+ # see [Permissions boundaries for IAM entities][1] in the *IAM User
2003
+ # Guide*.
2010
2004
  #
2011
- # Policies used as permissions boundaries do not provide permissions.
2005
+ # Policies used as permissions boundaries don't provide permissions.
2012
2006
  # You must also attach an IAM policy to the role. To learn how the
2013
2007
  # effective permissions for a role are evaluated, see [IAM JSON policy
2014
- # evaluation logic][2] in the *Identity and Access Management User
2015
- # Guide*.
2008
+ # evaluation logic][2] in the *IAM User Guide*.
2016
2009
  #
2017
2010
  #
2018
2011
  #
@@ -2031,15 +2024,14 @@ module Aws::SSOAdmin
2031
2024
  # }
2032
2025
  #
2033
2026
  # @!attribute [rw] customer_managed_policy_reference
2034
- # Specifies the name and path of the IAM customer managed policy. You
2035
- # must have an IAM policy that matches the name and path in each
2036
- # Amazon Web Services account where you want to deploy your permission
2037
- # set.
2027
+ # Specifies the name and path of a customer managed policy. You must
2028
+ # have an IAM policy that matches the name and path in each AWS
2029
+ # account where you want to deploy your permission set.
2038
2030
  # @return [Types::CustomerManagedPolicyReference]
2039
2031
  #
2040
2032
  # @!attribute [rw] managed_policy_arn
2041
- # The Amazon Web Services managed policy ARN that you want to attach
2042
- # to a permission set as a permissions boundary.
2033
+ # The AWS managed policy ARN that you want to attach to a permission
2034
+ # set as a permissions boundary.
2043
2035
  # @return [String]
2044
2036
  #
2045
2037
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/PermissionsBoundary AWS API Documentation
@@ -2062,11 +2054,11 @@ module Aws::SSOAdmin
2062
2054
  # }
2063
2055
  #
2064
2056
  # @!attribute [rw] instance_arn
2065
- # The ARN of the SSO instance under which the operation will be
2066
- # executed. For more information about ARNs, see [Amazon Resource
2067
- # Names (ARNs) and Amazon Web Services Service
2057
+ # The ARN of the IAM Identity Center instance under which the
2058
+ # operation will be executed. For more information about ARNs, see
2059
+ # [Amazon Resource Names (ARNs) and AWS Service
2068
2060
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2069
- # *Amazon Web Services General Reference*.
2061
+ # *AWS General Reference*.
2070
2062
  # @return [String]
2071
2063
  #
2072
2064
  # @!attribute [rw] permission_set_arn
@@ -2074,8 +2066,8 @@ module Aws::SSOAdmin
2074
2066
  # @return [String]
2075
2067
  #
2076
2068
  # @!attribute [rw] target_id
2077
- # TargetID is an Amazon Web Services account identifier, typically a
2078
- # 10-12 digit string (For example, 123456789012).
2069
+ # TargetID is an AWS account identifier, typically a 10-12 digit
2070
+ # string (For example, 123456789012).
2079
2071
  # @return [String]
2080
2072
  #
2081
2073
  # @!attribute [rw] target_type
@@ -2115,11 +2107,11 @@ module Aws::SSOAdmin
2115
2107
  # }
2116
2108
  #
2117
2109
  # @!attribute [rw] instance_arn
2118
- # The ARN of the SSO instance under which the operation will be
2119
- # executed. For more information about ARNs, see [Amazon Resource
2120
- # Names (ARNs) and Amazon Web Services Service
2110
+ # The ARN of the IAM Identity Center instance under which the
2111
+ # operation will be executed. For more information about ARNs, see
2112
+ # [Amazon Resource Names (ARNs) and AWS Service
2121
2113
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2122
- # *Amazon Web Services General Reference*.
2114
+ # *AWS General Reference*.
2123
2115
  # @return [String]
2124
2116
  #
2125
2117
  # @!attribute [rw] permission_set_arn
@@ -2127,7 +2119,7 @@ module Aws::SSOAdmin
2127
2119
  # @return [String]
2128
2120
  #
2129
2121
  # @!attribute [rw] inline_policy
2130
- # The IAM inline policy to attach to a PermissionSet.
2122
+ # The inline policy to attach to a PermissionSet.
2131
2123
  # @return [String]
2132
2124
  #
2133
2125
  # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/PutInlinePolicyToPermissionSetRequest AWS API Documentation
@@ -2160,8 +2152,8 @@ module Aws::SSOAdmin
2160
2152
  # }
2161
2153
  #
2162
2154
  # @!attribute [rw] instance_arn
2163
- # The ARN of the SSO instance under which the operation will be
2164
- # executed.
2155
+ # The ARN of the IAM Identity Center instance under which the
2156
+ # operation will be executed.
2165
2157
  # @return [String]
2166
2158
  #
2167
2159
  # @!attribute [rw] permission_set_arn
@@ -2216,8 +2208,7 @@ module Aws::SSOAdmin
2216
2208
 
2217
2209
  # A set of key-value pairs that are used to manage the resource. Tags
2218
2210
  # can only be applied to permission sets and cannot be applied to
2219
- # corresponding roles that Amazon Web Services SSO creates in Amazon Web
2220
- # Services accounts.
2211
+ # corresponding roles that IAM Identity Center creates in AWS accounts.
2221
2212
  #
2222
2213
  # @note When making an API call, you may pass Tag
2223
2214
  # data as a hash:
@@ -2259,11 +2250,11 @@ module Aws::SSOAdmin
2259
2250
  # }
2260
2251
  #
2261
2252
  # @!attribute [rw] instance_arn
2262
- # The ARN of the SSO instance under which the operation will be
2263
- # executed. For more information about ARNs, see [Amazon Resource
2264
- # Names (ARNs) and Amazon Web Services Service
2253
+ # The ARN of the IAM Identity Center instance under which the
2254
+ # operation will be executed. For more information about ARNs, see
2255
+ # [Amazon Resource Names (ARNs) and AWS Service
2265
2256
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2266
- # *Amazon Web Services General Reference*.
2257
+ # *AWS General Reference*.
2267
2258
  # @return [String]
2268
2259
  #
2269
2260
  # @!attribute [rw] resource_arn
@@ -2312,11 +2303,11 @@ module Aws::SSOAdmin
2312
2303
  # }
2313
2304
  #
2314
2305
  # @!attribute [rw] instance_arn
2315
- # The ARN of the SSO instance under which the operation will be
2316
- # executed. For more information about ARNs, see [Amazon Resource
2317
- # Names (ARNs) and Amazon Web Services Service
2306
+ # The ARN of the IAM Identity Center instance under which the
2307
+ # operation will be executed. For more information about ARNs, see
2308
+ # [Amazon Resource Names (ARNs) and AWS Service
2318
2309
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2319
- # *Amazon Web Services General Reference*.
2310
+ # *AWS General Reference*.
2320
2311
  # @return [String]
2321
2312
  #
2322
2313
  # @!attribute [rw] resource_arn
@@ -2359,8 +2350,8 @@ module Aws::SSOAdmin
2359
2350
  # }
2360
2351
  #
2361
2352
  # @!attribute [rw] instance_arn
2362
- # The ARN of the SSO instance under which the operation will be
2363
- # executed.
2353
+ # The ARN of the IAM Identity Center instance under which the
2354
+ # operation will be executed.
2364
2355
  # @return [String]
2365
2356
  #
2366
2357
  # @!attribute [rw] instance_access_control_attribute_configuration
@@ -2392,11 +2383,11 @@ module Aws::SSOAdmin
2392
2383
  # }
2393
2384
  #
2394
2385
  # @!attribute [rw] instance_arn
2395
- # The ARN of the SSO instance under which the operation will be
2396
- # executed. For more information about ARNs, see [Amazon Resource
2397
- # Names (ARNs) and Amazon Web Services Service
2386
+ # The ARN of the IAM Identity Center instance under which the
2387
+ # operation will be executed. For more information about ARNs, see
2388
+ # [Amazon Resource Names (ARNs) and AWS Service
2398
2389
  # Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
2399
- # *Amazon Web Services General Reference*.
2390
+ # *AWS General Reference*.
2400
2391
  # @return [String]
2401
2392
  #
2402
2393
  # @!attribute [rw] permission_set_arn